← Back
CWE-617

781 CVEs • Abstraction: Base

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

JSON object

Loading...

CVEs (781)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' in parser_parse_object_initializer in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerrySc...Show more
There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerryScript 2.2.0.Show less
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in Je...Show more
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.Show less
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.
1Qualcomm
186Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+183 more
Jun 17, 2026
Jun 9, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Co...Show more
Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
1Openvpn
1Openvpn Access Server
Jun 17, 2026
Jun 4, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a d...Show more
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.Show less
4Debian
FedoraprojectOpenldap+1 more
7Debian Linux
Enterprise LinuxFedora+4 more
Jun 17, 2026
May 28, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulner...Show more
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.Show less
3Fedoraproject
RedhatUpx
3Enterprise Linux
FedoraUpx
Jun 17, 2026
May 27, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
1Cesnet
1Libyang
Jun 17, 2026
May 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).
1Envoyproxy
1Envoy
Jun 17, 2026
May 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.
1Mikrotik
1Routeros
Jun 17, 2026
May 18, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted pac...Show more
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.Show less
2Fedoraproject
Redhat
3Ceph
Ceph StorageFedora
Jun 17, 2026
May 18, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The g...Show more
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.Show less
4Apple
DebianOpenldap+1 more
5Debian Linux
Jboss Core ServicesMac Os X+2 more
Jun 17, 2026
May 18, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to sys...Show more
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.Show less
1Google
1Tensorflow
Jun 17, 2026
May 14, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.SparseDenseCwiseMul`, an attacker can trigger denial of service via `CHECK`-fails or accesses to outside the...Show more
TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.SparseDenseCwiseMul`, an attacker can trigger denial of service via `CHECK`-fails or accesses to outside the bounds of heap allocated data. Since the implementation(https://github.com/tensorflow/tensorflow/blob/38178a2f7a681a7835bb0912702a134bfe3b4d84/tensorflow/core/kernels/sparse_dense_binary_op_shared.cc#L68-L80) only validates the rank of the input arguments but no constraints between dimensions(https://www.tensorflow.org/api_docs/python/tf/raw_ops/SparseDenseCwiseMul), an attacker can abuse them to trigger internal `CHECK` assertions (and cause program termination, denial of service) or to write to memory outside of bounds of heap allocated tensor buffers. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.Show less